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Configure input port of a 
network access device to 
provide a "default-public" 
access mode 



User device is sensed at 

the input port of the 
network access device 



I 



Network access device 
determines whether user 
device supports a 
recognized user 
authentication protocol 
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Is user 
authentication 

protocol 
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No 



Control logic places input 
port in a semi-authorized 
access state 
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Yes 



320 



Begin authentication 
procedure 
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Configure input port of a network access 
device to provide a "default-public" access 
mode having at least two pre-configured 
semi-authorized access states 
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User device is sensed at the 
input port of the network 
access device 



410 



Network access device 
determines whether user 
device suports a 
recognized user 
authentication protocol 



Yes 
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Begin authentication 
procedure 
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Determine type of user 
device at input port 



420 



Control logic selectively places 
the input port in one of the pre- 
configured semi-authorized 
access states based on type of 
user device 
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Configure input port of a network access device 
to provide a "default-public" access mode 
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User device is sensed at the input port 
of the network access device 
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Network access device authenticates 
(MAC) address of the user device 
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Network access device 
determines whether user device 
supports a recognized user 
authentication protocol 




Control logic places input 
port in a semi-authorized 
access state 



FIG. 5A 
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from Step 565 



570 



Network switch authenticates 
user of the device 
based on information 
provided by the user 
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Assign port to VLAN 
associated with user 
and forward packets 
from user device 



Control logic places 
input port in a semi- 
authorized access state 
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Control logic places input port in 
a semi-authorized access state 



FIG. 5B 



0302-28,vsd/6 



602 



Enable physical (MAC) 
address authentication for 
one or more ports 






Set a maximum number of 
secure MAC addresses for a port 






Set age timer for MAC address 

authentication 
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Specify secure MAC addresses 
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Configure switch to automatically 
save secure MAC addresses to 
a startup configuration file 






Specify action taken when 
a security violation occurs 
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